Creating a Two-Tier CA using Yubikeys

So you have more Yubikeys than sense? Great, me too! Let’s make a multi-tier certificate authority!

By the end of this article, we’ll have a fully-functioning two-tier CA where the private keys for the CAs are stored on Yubikeys. In addition, we’ll make sure that we generate the private keys directly on the Yubikeys for zero chance of key compromise. All keys will be elliptic-curve (ECC), and–barring mistakes on my part–the CA should fully adhere to RFC 5759, NSA’s Suite B Certificate and Certificate Revocation List (CRL) Profile.

Install Missing Docs on Alpine Linux

So maybe you’re not using Alpine Linux solely as a Docker container, and you want to have a useful set of documentation installed. First things first: when you install packages, make sure you grab the -doc package as well (duh). So for instance, if you want to install rsync, make sure you run apk add rsync rsync-doc. (Alternately, using shell expansion: apk add rsync{,-doc}.) But how to install any missing documentation packages for packages that have already been installed?

Minecraft on Apple Silicon

Can I run Minecraft on my new M1/Apple Silicon Mac? Sure! Let’s start with the simplest scenario and go get the official Minecraft: Java Edition client for macOS. Open the DMG and drag the Minecraft app to the Applications shortcut: (Note that this requires you to install Rosetta 2, which is foreshadowing for the rest of this post.) Log in with your Microsoft or Mojang account.

Pocket, Please Let Me Rename Things.

Sometimes I just want to name things the way I deem fit. Pocket, back when they were called “Read It Later”, used to include this functionality. Somewhere along the way, Pocket decided to remove that feature in preference to augmenting their product to do a really good job of figuring out what an article’s title should be. However, there are still many times that it would be helpful to have the ability to manually rename an article. I’ll detail some problematic articles below, with screenshots.

Booting a ZFS Root via UEFI on Debian

I’m playing with ZFS on Linux using Debian jessie (and eventually stretch). I decided I really wanted to use ZFS for everything, including /boot/grub and swap space. In addition, I wanted to boot using UEFI. This is how I did it.

Crashplan on SmartOS

It’s taken quite a while, but I have replaced my home server’s OS with SmartOS. (It was previously running Windows with Hyper-V. Look for a future blog post about the migration in general.) With the previous layout, I had a single Linux guest called “nas” that was my file server, but did triple-duty running Plex and the CrashPlan client as well. After migrating most of my other Hyper-V guests to OS zones where possible, it was time to tackle getting a CrashPlan zone going. Unfortunately, Code42 retired Solaris as a supported platform a while back. However, since it’s “just Java”, I figured the Linux package might work in an LX-brand zone. Turns out, it works quite well–with one minor caveat.